Viewing file:  EditReport.php (2.49 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
session_start();
/** Set Timezone **/
date_default_timezone_set('Asia/Bangkok');
/** Define Validate Access */
define( '_VALID_ACCESS' , 1 );
/** Check Session User Login */
if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {
echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>กรุณาทำการ Login ก่อน</strong></font></p></p>";
echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";
exit();
}
else {
/** Configuration */
require_once( "../configuration.php" );
require_once( $_Config_absolute_path . "/includes/framework.php" );
require_once( "../includes/Function.php" );
require_once( "../includes/FunctionDB.php" );
/** Create Database Object */
$dbObj = new DBConn;
//=== SESSION
$Username = $valid_user;
$Report_name = htmlspecialchars(trim($Report_name));
$Path = "../Qa_pic";
$query1 = "select * from qa_qareport_tb WHERE ReportqaId='".$_REQUEST["ReportqaId"]."'";
$result1 = mysql_query($query1);
$rs = mysql_fetch_array($result1);
//### Upload Image File
if( $_FILES['Filename']['name'] != "" ) {
//ลบไฟล์เอกสารเดิม
if(!empty($rs["Filename"])) unlink($QAPicPath.$rs["Filename"]);
//Upload ไฟล์เอกสารใหม่
//$Filetex = $_FILES['Filetex']['name'];
$Filename = date('YmdHis').strrchr($_FILES['Filename']['name'], ".");
@copy( $_FILES['Filename']['tmp_name'] , $QAPicPath.$Filename);
@unlink( $_FILES['Filename']['tmp_name'] );
$query ="UPDATE qa_qareport_tb SET Report_name='$Report_name', Filename='$Filename' WHERE ReportqaId = '".$_REQUEST["ReportqaId"]."'";
$dbObj->runQuery($query);
echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
echo "<script>alert('ระบบแก้ไขข้อมูลเรียบร้อยแล้ว');</script>";
echo "<script>window.close(); window.opener.location.reload(); </script>";
}
else{
$query ="UPDATE qa_qareport_tb SET Report_name='$Report_name' WHERE ReportqaId = '".$_REQUEST["ReportqaId"]."'";
$dbObj->runQuery($query);
echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
echo "<script>alert('ระบบแก้ไขข้อมูลเรียบร้อยแล้ว');</script>";
echo "<script>window.close(); window.opener.location.reload(); </script>";
}
$dbObj->freeresult($result1);
} # else
?>
|